Staff Security Operations Specialist

Job not on LinkedIn

🔥 6 minutes ago

🇨🇦 Canada – Remote

💵 $125k - $160k / year

⏰ Full Time

🔴 Lead

🛡️ Security Operations

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Workleap

WebsiteLinkedInAll Job Openings

201 - 500 employees

👥 HR Tech

☁️ SaaS

⚡ Productivity

💰 Private Equity Round on 2023-06

HR Tech • SaaS • Productivity

Workleap is a company that provides an integrated platform designed to improve the employee experience by focusing on engagement, performance, and development. Their suite of products includes Officevibe, Pingboard, and various Learning Management Systems (LMS) that help businesses tackle challenges like hybrid work, onboarding, professional development, and performance management. Workleap aims to create happier and more productive workplaces by making it easier for HR teams to manage and enhance their HR strategies. With a customer base exceeding 20,000 leaders globally, Workleap offers tools that are easy to implement and integrate with existing HR and productivity systems.

📋 Description

• Own how Workleap detects, investigates and responds to threats across Workleap and ShareGate • Build the end-to-end security operations pipeline, including alert integrations, agentic triage, enrichment, correlation and investigation drafting • Connect investigation results to Jira with evidence and remediation paths • Define the trust model for security agents, including autonomous closures, recommendations and human escalation • Develop evaluations and secure agents against prompt injection and permission abuse • Reduce false positives and improve finding prioritization • Own detection engineering as code mapped to MITRE ATT&CK • Lead security incident response from triage through postmortem • Manage performance expectations for the managed detection partner • Deliver actionable security findings to developers in their workflow • Report to the Director of Infrastructure and Security and collaborate with application security, security tooling, infrastructure, ITX and product engineering teams

🎯 Requirements

• 7+ years in security operations, incident response or detection engineering, with recent hands-on time in a cloud SaaS environment • Deep experience validating tooling findings, tuning false positives, and making decisions with incomplete evidence • Years of working directly with developers and getting fixes shipped without authority • Built and shipped agent systems for security work, such as MCP servers, Claude skills, subagents or custom tools, with evals that determine when output is trusted • Working model of agentic-system failures and attacks, including prompt injection, tool permission scoping and credential handling • Detection engineering experience, including detections as code, fluent SIEM query language use, and measuring false-positive rates • Strong grasp of identity and cloud attack paths, ideally in Azure and Entra ID • Bonus: experience directing a managed detection partner, threat hunting or forensics, and working proficiency in French

🏖️ Benefits

• Annual bonus program • LTIP program, share in Workleap's long-term growth • RRSP • Family health insurance • Telemedicine • Annual wellness budget • Flexible vacation policy • Remote work, with access to our Montreal office • In-person gatherings twice a year • Claude access, for everyone